CVSS: 9.0EPSS: 0%CPEs: 1EXPL: 2CVE-2024-2986 – Tenda FH1202 SetSpeedWan formSetSpeedWan stack-based overflow
https://notcve.org/view.php?id=CVE-2024-2986
27 Mar 2024 — A vulnerability was found in Tenda FH1202 1.2.0.14(408). It has been rated as critical. This issue affects the function formSetSpeedWan of the file /goform/SetSpeedWan. The manipulation of the argument speed_dir leads to stack-based buffer overflow. The attack may be initiated remotely. • https://github.com/DEVisions/CVE-2024-29868 • CWE-121: Stack-based Buffer Overflow •
CVSS: 9.0EPSS: 0%CPEs: 1EXPL: 2CVE-2024-2985 – Tenda FH1202 QuickIndex formQuickIndex stack-based overflow
https://notcve.org/view.php?id=CVE-2024-2985
27 Mar 2024 — A vulnerability was found in Tenda FH1202 1.2.0.14(408). It has been declared as critical. This vulnerability affects the function formQuickIndex of the file /goform/QuickIndex. The manipulation of the argument PPPOEPassword leads to stack-based buffer overflow. The attack can be initiated remotely. • https://github.com/sinsinology/CVE-2024-29855 • CWE-121: Stack-based Buffer Overflow •
CVSS: 9.0EPSS: 0%CPEs: 1EXPL: 2CVE-2024-2984 – Tenda FH1202 setcfm formSetCfm stack-based overflow
https://notcve.org/view.php?id=CVE-2024-2984
27 Mar 2024 — A vulnerability was found in Tenda FH1202 1.2.0.14(408). It has been classified as critical. This affects the function formSetCfm of the file /goform/setcfm. The manipulation of the argument funcpara1 leads to stack-based buffer overflow. It is possible to initiate the attack remotely. • https://github.com/sinsinology/CVE-2024-29849 • CWE-121: Stack-based Buffer Overflow •
CVSS: 9.0EPSS: 0%CPEs: 1EXPL: 1CVE-2024-2983 – Tenda FH1202 SetClientState formSetClientState stack-based overflow
https://notcve.org/view.php?id=CVE-2024-2983
27 Mar 2024 — A vulnerability was found in Tenda FH1202 1.2.0.14(408) and classified as critical. Affected by this issue is the function formSetClientState of the file /goform/SetClientState. The manipulation of the argument deviceId/limitSpeed/limitSpeedUp leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. • https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/FH/FH1202/formSetClientState.md • CWE-121: Stack-based Buffer Overflow •
CVSS: 8.8EPSS: 3%CPEs: 1EXPL: 3CVE-2024-2982 – Tenda FH1202 WriteFacMac formWriteFacMac command injection
https://notcve.org/view.php?id=CVE-2024-2982
27 Mar 2024 — A vulnerability has been found in Tenda FH1202 1.2.0.14(408) and classified as critical. Affected by this vulnerability is the function formWriteFacMac of the file /goform/WriteFacMac. The manipulation of the argument mac leads to command injection. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-258151. • https://github.com/horizon3ai/CVE-2024-29824 • CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection') •
CVSS: 9.0EPSS: 1%CPEs: 1EXPL: 1CVE-2024-2981 – Tenda FH1202 fast_setting_wifi_set form_fast_setting_wifi_set stack-based overflow
https://notcve.org/view.php?id=CVE-2024-2981
27 Mar 2024 — A vulnerability, which was classified as critical, was found in Tenda FH1202 1.2.0.14(408). Affected is the function form_fast_setting_wifi_set of the file /goform/fast_setting_wifi_set. The manipulation of the argument ssid leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. • https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/FH/FH1202/form_fast_setting_wifi_set.md • CWE-121: Stack-based Buffer Overflow •
CVSS: 9.0EPSS: 1%CPEs: 1EXPL: 1CVE-2024-2980 – Tenda FH1202 execCommand formexeCommand stack-based overflow
https://notcve.org/view.php?id=CVE-2024-2980
27 Mar 2024 — A vulnerability, which was classified as critical, has been found in Tenda FH1202 1.2.0.14(408). This issue affects the function formexeCommand of the file /goform/execCommand. The manipulation of the argument cmdinput leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. • https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/FH/FH1202/formexeCommand.md • CWE-121: Stack-based Buffer Overflow •
CVSS: 10.0EPSS: 0%CPEs: 8EXPL: 1CVE-2023-38932
https://notcve.org/view.php?id=CVE-2023-38932
07 Aug 2023 — Tenda F1202 V1.2.0.9, PA202 V1.1.2.5, PW201A V1.1.2.5 and FH1202 V1.2.0.9 were discovered to contain a stack overflow via the page parameter in the SafeEmailFilter function. • https://github.com/FirmRec/IoT-Vulns/tree/main/tenda/formSafeEmailFilter • CWE-787: Out-of-bounds Write •
CVSS: 10.0EPSS: 0%CPEs: 8EXPL: 1CVE-2023-38938
https://notcve.org/view.php?id=CVE-2023-38938
07 Aug 2023 — Tenda F1202 V1.2.0.9, PA202 V1.1.2.5, PW201A V1.1.2.5 and FH1202 V1.2.0.9 were discovered to contain a stack overflow via the page parameter at /L7Im. • https://github.com/FirmRec/IoT-Vulns/tree/main/tenda/frmL7ImForm • CWE-787: Out-of-bounds Write •
CVSS: 10.0EPSS: 0%CPEs: 4EXPL: 1CVE-2023-38939
https://notcve.org/view.php?id=CVE-2023-38939
07 Aug 2023 — Tenda F1202 V1.2.0.9 and FH1202 V1.2.0.9 were discovered to contain a stack overflow via the mit_ssid parameter in the formWrlsafeset function. • https://github.com/FirmRec/IoT-Vulns/tree/main/tenda/formWrlsafeset • CWE-787: Out-of-bounds Write •